Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e372e302f32342d3234203d3e20323638393235.roa
File:                     34352e3137362e372e302f32342d3234203d3e20323638393235.roa (raw, json)
Hash identifier:          CKXRre9kHDeafn68W9IPUhhmYntSfL1w/2pIoPazK9E=
Subject key identifier:   4C:89:03:88:24:C5:26:E5:5D:0C:7F:BB:DE:E6:6B:D1:AE:1D:79:EC
Certificate issuer:       /CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
Certificate serial:       11D99A9B2F6B06B4AD52441D6CB44C587D772751
Authority key identifier: B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e372e302f32342d3234203d3e20323638393235.roa
Signing time:             Thu 06 Mar 2025 08:14:53 +0000
ROA not before:           Thu 06 Mar 2025 08:09:53 +0000
ROA not after:            Thu 05 Mar 2026 08:14:53 +0000
asID:                     268925
IP address blocks:        45.176.7.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d9:9a:9b:2f:6b:06:b4:ad:52:44:1d:6c:b4:4c:58:7d:77:27:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
        Validity
            Not Before: Mar  6 08:09:53 2025 GMT
            Not After : Mar  5 08:14:53 2026 GMT
        Subject: CN=4C89038824C526E55D0C7FBBDEE66BD1AE1D79EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3c:1a:ac:6e:29:75:d2:71:2f:7d:fe:d8:9d:
                    aa:2d:7d:63:d5:7a:33:95:d2:20:08:3e:11:08:84:
                    ea:f4:65:43:9a:8d:44:82:46:1e:6e:ca:80:50:d6:
                    35:7d:7e:52:78:52:2e:6f:44:02:3d:c7:42:46:7e:
                    02:af:50:bb:6e:25:08:a3:47:f2:80:c0:b0:26:63:
                    63:a4:c1:e9:0a:5e:24:f2:b3:00:49:03:28:35:ee:
                    7d:2d:fb:77:e3:cd:88:ac:1f:fa:2c:5a:2e:71:72:
                    c0:da:9d:ea:0b:d6:63:7f:69:4a:ea:a4:aa:20:a3:
                    61:9b:72:9e:7c:ef:f1:22:d3:a3:a5:f6:9c:d8:2b:
                    64:7d:b0:a6:61:5d:7e:06:2f:94:88:0e:2c:58:18:
                    0a:39:b4:50:51:4c:bb:ca:94:02:75:94:6d:08:6a:
                    2d:66:19:27:29:f5:ba:37:77:e9:62:4d:88:65:ee:
                    8b:c0:6c:38:01:06:1a:55:77:01:e9:9e:9a:99:93:
                    f8:3d:55:bf:4a:f8:be:35:e6:32:22:91:56:52:1f:
                    0a:d6:ab:25:98:4d:6c:f7:ce:e7:17:83:ef:af:94:
                    23:6c:5d:73:55:f2:c9:8a:92:52:85:12:00:a2:96:
                    78:48:05:a2:83:4c:47:22:f6:bd:21:c7:ba:d4:30:
                    e0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:89:03:88:24:C5:26:E5:5D:0C:7F:BB:DE:E6:6B:D1:AE:1D:79:EC
            X509v3 Authority Key Identifier:
                keyid:B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e372e302f32342d3234203d3e20323638393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:b7:d8:2b:8a:89:fb:8a:ba:49:15:ea:94:62:2b:37:88:47:
         68:66:4a:ff:2a:ac:e4:38:ed:66:92:85:b6:e7:1a:f0:3b:04:
         fa:3e:4d:f6:ea:89:05:42:92:d0:51:62:ae:d2:f0:0f:a9:1a:
         e3:da:a9:0a:ea:08:6b:e4:b2:2f:39:8c:f7:5a:17:fc:20:86:
         92:cf:3a:f8:41:cb:be:ef:fe:ad:b6:5a:4d:25:dc:c3:4d:9e:
         6b:c6:dc:e6:1b:cc:ed:7a:78:0b:f5:cd:99:62:eb:88:9d:e3:
         44:d9:00:1e:41:49:04:e8:cb:f5:83:9c:24:19:81:e7:ae:e5:
         cd:52:41:24:5b:57:54:66:6c:84:60:a4:ea:9d:97:45:29:09:
         f9:9a:f8:5b:9f:96:37:b3:3e:67:b4:11:ba:59:9c:d6:c7:c1:
         8b:0c:5f:6f:c3:d2:b8:6a:f7:ad:a3:70:fd:21:c5:62:58:aa:
         39:37:5c:c1:5d:e4:4d:5b:d8:38:30:e8:c7:a5:ce:70:6f:96:
         ca:7c:82:bd:f7:57:b6:8f:22:9d:bb:fd:6a:27:88:2f:fc:09:
         88:c3:da:22:19:79:e4:74:a9:80:0b:a9:6f:87:c3:da:ca:f2:
         ab:69:96:89:3b:3a:30:85:9a:fb:73:56:94:64:0d:32:e3:68:
         2c:a5:8b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:11:10 2025 by rpki-client